Cybersecurity Threat Intelligence Analyst

Recruiter
IBM
Location
United States, AUSTIN
Salary
Competitive
Posted
21 Aug 2018
Closes
20 Aug 2018
Ref
169594BR
Sector
Consultancy
Job Type
Permanent
IBM is seeking a Cyber Security Analyst in Austin, TX to work on the Cyber Security Rapid Response Team - Security Monitoring, Forensic and Threat Intelligence function.

This position requires a motivated fast learner, who is able to work within the Rapid Response function to identify, analyze, and remediate potential threats to the environment as well as work within the threat intelligence community to stay abreast of the latest threats and risks to the environment. The candidate will require security industry knowledge that evolves with current and emerging threats, as well as an ongoing understanding of key business and technological processes. This position will report to the Threat and Response Lead of Information Security.

This role will perform security monitoring, investigations and perform analysis of events in order to thwart internal and external threats to the environment. Additionally, will collaborate on an ongoing basis with the Cyber Security Rapid Response Incident Response Team, Managed Security Service providers, external agencies, and internal business units to support intelligence, detection, triage, incident analysis, containment, remediation and reporting of events/incidents while coordinating, balancing business priorities, emerging and actual threats and best practices to ensure the confidentiality, integrity and availability of information assets.

Security Monitoring
• Analyze and respond to security threats from Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Antivirus (AV), Network Access Control (NAC) and other security threat data sources.
• Respond in a timely manner (within documented SLA) to support, threat and other cases.
• Document actions in cases to effectively communicate information to internal stakeholders.
• Adhere to policies, procedures, and security practices
• Resolve problems independently and understand escalation procedure.
• Conduct Security Monitoring activities to provide Security in Depth visibility into potential known and unknown threats that may pose risk to the IBM environment.
• Participate in security incidents and technical analysis during significant security incidents.
• Utilize analytics to identify potential threats to the environment.
• Detect, respond, mitigate, and report on cyber threats/incidents that may impact the environment.
• Collaborate with technical leads: Engineering, Operations, Service Desk, Applications and BISOs on matters related to security monitoring across global footprint.
• Collaborate and serve as liaison to Managed and/or Unmanaged Security Service providers.
• Conduct Operations surrounding cyber security incident response technologies including network logging and forensics, security information and event management tools, security analytics platforms, log search technologies, and host based forensics as applicable.
• Act as an internal information security consultant to the business and technology units, advising on risks, threats and control practices related to Rapid Response.
• Tracks threat actor campaigns, exploits, and TTPs
• Identify, prioritize, and track intelligence requirments
• Converts threat intelligence into actionable rules and alerts within monitoring solutions
• Conducts malware analysis to support event management and incident response to identify indicators
• Assesses intelligence reports from multiple sources
• Maintains awareness of evolving security threats
• Coordinates and shares pertinent threat intel and indicators with interal stakeholders
• Performs other duties as assigned.

Required Technical and Professional Expertise
• Minimum 10 years of experience working in the Information Security
• Strong Threat Intel background
• Critical thinking and problem solving skills
• Passion for information security and data security
• Strong written/verbal communication skills
• Strong interpersonal and organization skills
• Industry recognized certification: (CISSP, CASP, CISM, etc.)

Preferred Technical and Professional Experience
• Practical experience with TCP/IP networking
• Experience with Linux, Windows and Network Operating Systems
• Working knowledge of Routing and Access Control Devices

EO Statement
IBM is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.